Enable UEFI Secure Boot

There are two methods available to enable UEFI Secure Boot:

• From Lenovo XClarity Provisioning Manager

  To enable UEFI Secure Boot from Lenovo XClarity Provisioning Manager:

  1. Start the server and press the key specified in the on-screen instructions to display the Lenovo XClarity Provisioning Manager interface. (For more information, see the Startup section in the LXPM documentation compatible with your server at Lenovo XClarity Provisioning Manager portal page.)

  2. If the power-on Administrator password is required, enter the password.

  3. From the UEFI Setup page, click System Settings > Security > Secure Boot Configuration > Secure Boot Setting.

  4. Enable Secure Boot and save the settings.

  Note

  If disabling UEFI secure boot is needed, select Disable in step 4.

• From Lenovo XClarity Essentials OneCLI

  To enable UEFI Secure Boot from Lenovo XClarity Essentials OneCLI:

  1. Download and install Lenovo XClarity Essentials OneCLI.

     To download Lenovo XClarity Essentials OneCLI, go to the following site:

     XClarity Essentials OneCLI website

  2. Run the following command to enable Secure Boot:

     OneCli.exe config set UEFI.SecureBootConfiguration_SecureBootSetting Enabled --bmc <userid>:<password>@<ip_address>
     

     where:

     • <userid>:<password> are the credentials used to access the BMC (Lenovo XClarity Controller interface) of your server. The default user ID is USERID, and the default password is PASSW0RD (zero, not an uppercase o)

     • <ip_address> is the IP address of the BMC.

     For more information about the Lenovo XClarity Essentials OneCLI set command, see:

     Lenovo XClarity Essentials set command

  Note

  If disabling UEFI secure boot is needed, run the following command:

  OneCli.exe config set UEFI.SecureBootConfiguration_SecureBootSetting Disabled --bmc <userid>:<password>@<ip_address>